Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add RaNDoM6913/claude-code-superkit --skill api-contract-syncgit clone --depth 1 https://github.com/RaNDoM6913/claude-code-superkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/random6913/claude-code-superkit/api-contract-sync)<a href="https://agentmods.dev/skills/random6913/claude-code-superkit/api-contract-sync"><img src="https://agentmods.dev/badge/skills/random6913/claude-code-superkit/api-contract-sync/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/random6913/claude-code-superkit/api-contract-sync"><img src="https://agentmods.dev/badge/skills/random6913/claude-code-superkit/api-contract-sync.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00039 | $0.01992 |
| Opus 5.5 | $0.00016 | $0.00797 |
| Sonnet 5.5 | $0.00008 | $0.00398 |
| Haiku 4.5 | $0.00004 | $0.00199 |
Grade A, and why
api-contract-sync scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 97 lines — stays where its author put it; the contents beside it link to each section on GitHub.
API Contract Sync
Review whether the API contract matches its implementation for the declared scope. Use for selected route, handler, DTO/schema, or specification changes and requested API audits. A code-level comparison does not establish deployed behavior. The role name does not authorize editing either side to make them agree.
Scope, context, and authority
Read applicable AGENTS.md first, then the relevant API/documentation map and project conventions. Establish the requested base/head, working-tree diff, or explicit API/version scope. Identify the authoritative specification, generated sources/artifacts, route registrations, handler/DTO code, and expected target configuration. Resolve ambiguous scope or conflicting sources before claiming complete coverage.
Review only. Propose corrections to the appropriate source owner; do not edit code/specs, regenerate tracked files, post comments, or call credentialed/live endpoints without task authority. Do not infer access from a URL, connection string, or installed client. Use safe local checks only within scope and existing authority; importing an app or running a spec generator can start services or write files, so inspect its behavior first. Redact secrets and private payloads.
Honor explicit task/project routing and acceptance ownership. Disclose INDEPENDENT versus INLINE SELF-REVIEW. Keep requested/configured model and effort separate from runtime-observed values with evidence or UNVERIFIED. Identity reporting alone adds no acceptance gate; an explicitly required independent/Astra gate still applies.
Discover the actual contract sources
Use the project's map rather than selecting the first file named openapi.yaml. Relevant sources may include OpenAPI/Swagger YAML/JSON, generated artifacts, annotations, schema modules, or a versioned external contract supplied by the user. Confirm the declared OpenAPI/Swagger version before interpreting schema semantics, references, and nullability. Do not fetch remote references without authorized access; unresolved $ref content remains unverified.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +14 lines · +22 tokens per session f213fe78a1cc
- 1mo ago First seen · 83 lines · 17 tokens per session scan A dd02f353d6e8
api-contract-sync is a skill published in the GitHub repository RaNDoM6913/claude-code-superkit (3 stars, last pushed today), licensed MIT. It adds 39 tokens to every session and 1,992 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
ship-adapter
Lyra's adapter-shipping skill. Ports a schema, interface, or API contract from one shape to another — DB adapters, API client wrappers, data transformers. Bounded scope, honesty ledger on delivery.
backend-work
Use when starting or continuing backend code changes — server, API, database access, business logic on the server side.
Supabase Expert
Database and backend knowledge for business operators — table design, auth setup, row-level security, storage, and edge functions explained in plain English. Not a developer guide — domain expertise for building your backend on Supabase.
n8n-code-javascript
Write JavaScript code in n8n Code nodes. Use when writing JavaScript in n8n, using $input/$json/$node syntax, making HTTP requests with $helpers, working with dates using DateTime, troubleshooting Code node errors, or choosing between Code node modes.
stripe-projects
Provision SaaS services + sync creds via Stripe Projects.
gemini-api-agent-platform
Guides the usage of the Gemini API on Agent Platform with the Google Gen AI SDK for enterprise AI applications. Covers SDK usage (Python, JS/TS, Go, Java, C#), capabilities like Live API, tools, multimedia generation, caching, and batch prediction.